Skip to content
Security Trust Center

Review the controls behind your agent platform

The Python SDK encrypts your Task requests, live events and Library calls end to end, from your application to Duale AI.
Review subprocessors

Protect business traffic from client to service

The exchanges that carry your work get application-layer encryption on top of HTTPS.

In the Dashboard, protected Tenant operations such as identity and access administration get the same encryption, from your browser to Duale AI. Platform-token issuance and signed document-part uploads travel over HTTPS. See the exact end-to-end encryption boundary.

Data encrypted, access checked, evidence recorded

Start with the controls that apply across the managed service.
  • Encryption at rest

    Duale AI encrypts Library source files, extracted content, search data, database backups and reporting copies before storage.

  • Access checked within each Tenant

    Duale AI checks each authenticated operation against the rights of its Tenant and of the person or agent making it.

  • Evidence for your reviews

    Task lifecycle events, routing records, typed failures and each Tenant’s audit events let your team review production and incidents.

Know where the Platform and data run

  • Managed data hosted in the EU

    Duale AI hosts managed application data in the European Union. The subprocessor list names the current hosting providers and countries.

  • Managed or in your infrastructure

    Use the managed service, or run the Platform in your own infrastructure. An installation agreement sets who operates what.

  • Providers you choose

    Your team chooses the model providers and remote MCP servers, and signs its own contracts with them. Duale AI reaches them with the credentials you configure.

Find the evidence for your deployment review

Read shared responsibility, implementation guidance and the binding terms and subprocessors. For evidence specific to your deployment, contact our team.

Get answers from our team, or read how your data is protected.

Read data protection